Red Hat Security AdvisoryRHSA-2011:0262
sendmail security and bug fix update
Released 2011-02-16 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 sendmail-8.13.1-6.el4, sendmail-8.13.1-6.el4.i386, sendmail-8.13.1-6.el4.ia64 +13
- Red Hat Enterprise Linux Desktop version 4 sendmail-8.13.1-6.el4, sendmail-8.13.1-6.el4.i386, sendmail-cf-8.13.1-6.el4 +5
- Red Hat Enterprise Linux ES version 4 sendmail-8.13.1-6.el4, sendmail-8.13.1-6.el4.i386, sendmail-8.13.1-6.el4.ia64 +9
- Red Hat Enterprise Linux WS version 4 sendmail-8.13.1-6.el4, sendmail-8.13.1-6.el4.i386, sendmail-8.13.1-6.el4.ia64 +9
Fixes 1 record
Priority LOW 37
sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted s…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02395 · Published 2010-01-04 · Fixed CWE-310
